diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index 1eefc5ec54de4ab465f149e8efdbdd5a0be109dd..eea3b69aadcbef7b4c804b21b3d60f4441f455c1 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -54,7 +54,7 @@
 - hosts: etcd:k8s-cluster:vault
   any_errors_fatal: true
   roles:
-    - { role: kargo-defaults, when: "cert_management == 'vault'"}}
+    - { role: kargo-defaults, when: "cert_management == 'vault'"}
     - { role: vault, tags: vault, when: "cert_management == 'vault'"}
 
 #Handle upgrades to master components first to maintain backwards compat.